$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer File: FF8AC067065068E09CB651C346795E8C0753D3DB.cer (raw, json) Hash identifier: 9Jnn32FHmmqN9Zb36BYC4kcfaLY+fBh71sEc8eBS2co= Subject key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 389DB82BA65F0C97D3F0BCC565E4B183C257CC97 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 11:23:19 +0000 Certificate not after: Wed 27 Jan 2027 11:28:19 +0000 Subordinate resources: AS: 28451 IP: 2806:3f9::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:9d:b8:2b:a6:5f:0c:97:d3:f0:bc:c5:65:e4:b1:83:c2:57:cc:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 11:23:19 2026 GMT Not After : Jan 27 11:28:19 2027 GMT Subject: CN=FF8AC067065068E09CB651C346795E8C0753D3DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:14:6e:73:74:8f:c4:dc:7f:26:0e:47:f7: 25:ee:44:58:9d:b0:3d:79:2d:d4:33:f2:17:09:24: ce:38:97:90:bb:8b:68:1b:48:e7:89:e4:6b:d6:0e: d7:2f:1b:dc:46:5a:6f:52:c1:53:fa:d5:0a:74:8b: 74:46:6d:01:f4:e8:77:e0:76:e9:ed:63:f6:9b:51: 1a:ab:34:6c:16:3d:3c:b0:39:a5:bc:f2:2c:aa:17: 43:eb:d4:5b:27:9f:de:a8:59:74:62:94:18:36:d0: 69:b4:2c:13:2d:86:ec:4f:88:8e:9d:dc:ff:9c:26: 49:6c:56:e2:5b:62:73:1e:ad:f5:f1:14:b2:0b:c1: 67:fc:0c:20:cd:f2:6a:38:c4:17:43:3a:60:da:be: b6:93:78:12:f3:8d:45:fa:af:ef:eb:66:e0:a9:68: 27:9d:67:25:c6:76:ae:2a:9e:38:2b:a1:46:36:29: d5:25:01:70:55:b4:c9:c2:dc:a1:24:28:de:f2:18: b6:36:63:d1:17:66:d3:06:d5:e0:f8:9e:b8:fe:11: 44:85:6d:81:1c:21:9c:6d:ed:7b:3f:b7:86:14:db: 35:cf:bf:24:18:1c:06:1f:96:5c:2d:c2:4b:ff:c7: ba:4e:73:63:e2:92:73:cb:75:a7:23:ef:1d:7c:cf: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3f9::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28451 Signature Algorithm: sha256WithRSAEncryption 18:9b:2e:90:72:51:66:1d:5a:1f:4d:24:3b:93:d9:6f:8d:ba: 45:3a:d0:65:9c:17:41:af:58:64:c5:05:93:42:73:75:44:ca: 9c:2a:2f:91:d6:93:26:3c:c3:0e:f5:54:c4:72:46:12:1f:4a: 2e:38:d6:60:a3:76:e6:a2:a2:b8:f0:7e:89:ff:28:f0:91:d0: 37:61:e3:e1:78:17:97:b5:93:4f:ec:38:af:5f:50:a3:d0:12: 44:21:ff:15:02:d2:1c:f3:a4:03:87:ef:fa:d7:7e:ff:3e:5d: 0a:20:cf:ee:88:36:ff:4b:24:82:24:3f:e2:07:09:d6:20:80: 28:67:3d:d9:ab:fb:98:8b:81:bc:d2:dc:ca:38:cf:6e:75:22: a7:12:9e:90:a9:2a:f7:eb:af:ac:1b:82:b8:32:e3:6e:aa:4b: ea:dd:fd:8c:dc:ec:64:1f:f0:d1:9e:4f:0e:92:73:e5:62:b1: 55:05:56:c4:c9:0d:05:71:5b:68:99:44:88:4d:b2:7b:08:ae: 73:15:95:75:9a:dd:cf:f1:50:7a:c9:a4:6b:b5:44:95:9b:8b: 0d:a5:38:51:5e:83:54:86:fb:37:83:41:43:c6:70:72:97:b3: a1:ab:07:cc:f8:b1:a8:25:7f:44:3b:cd:7e:7b:8b:f4:f2:a4: 89:c1:e2:e7 -----BEGIN CERTIFICATE----- MIIGljCCBX6gAwIBAgIUOJ24K6ZfDJfT8LzFZeSxg8JXzJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMTIzMTlaFw0yNzAxMjcxMTI4MTlaMDMxMTAvBgNV BAMTKEZGOEFDMDY3MDY1MDY4RTA5Q0I2NTFDMzQ2Nzk1RThDMDc1M0QzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKxRuc3SPxNx/Jg5H9yXuRFid sD15LdQz8hcJJM44l5C7i2gbSOeJ5GvWDtcvG9xGWm9SwVP61Qp0i3RGbQH06Hfg duntY/abURqrNGwWPTywOaW88iyqF0Pr1Fsnn96oWXRilBg20Gm0LBMthuxPiI6d 3P+cJklsVuJbYnMerfXxFLILwWf8DCDN8mo4xBdDOmDavraTeBLzjUX6r+/rZuCp aCedZyXGdq4qnjgroUY2KdUlAXBVtMnC3KEkKN7yGLY2Y9EXZtMG1eD4nrj+EUSF bYEcIZxt7Xs/t4YU2zXPvyQYHAYfllwtwkv/x7pOc2PiknPLdacj7x18z+lHAgMB AAGjggOgMIIDnDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/isBnBlBo4Jy2 UcNGeV6MB1PT2zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEYwMDZGQURDMjQ3NkU0NTA5MUYzNzdD RTcxMjEzOEZGQUY2QjFBQTc4Q0I2ODgyMTVDRTdCNEE2QkI4NDNBRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84RjAwNkZBREMyNDc2RTQ1MDkxRjM3N0NFNzEyMTM4RkZBRjZCMUFBNzhD QjY4ODIxNUNFN0I0QTZCQjg0M0FFLzAvRkY4QUMwNjcwNjUwNjhFMDlDQjY1MUMz NDY3OTVFOEMwNzUzRDNEQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYD+TAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgJvIzANBgkqhkiG9w0BAQsFAAOCAQEAGJsukHJR Zh1aH00kO5PZb426RTrQZZwXQa9YZMUFk0JzdUTKnCovkdaTJjzDDvVUxHJGEh9K LjjWYKN25qKiuPB+if8o8JHQN2Hj4XgXl7WTT+w4r19Qo9ASRCH/FQLSHPOkA4fv +td+/z5dCiDP7og2/0skgiQ/4gcJ1iCAKGc92av7mIuBvNLcyjjPbnUipxKekKkq 9+uvrBuCuDLjbqpL6t39jNzsZB/w0Z5PDpJz5WKxVQVWxMkNBXFbaJlEiE2yewiu cxWVdZrdz/FQesmka7VElZuLDaU4UV6DVIb7N4NBQ8ZwcpezoasHzPixqCV/RDvN fnuL9PKkicHi5w== -----END CERTIFICATE-----Generated at Thu Feb 19 01:16:22 2026 by rpki-client